This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json) Hash identifier: enXvag8VsoFB2a5PfaDYdwqqPSh/dKWM+tqMIXGqPyU= Subject key identifier: B9:71:DE:2F:C4:71:B0:DE:CE:E8:25:78:64:2C:57:0C:EE:8A:9E:75 Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be Certificate serial: 019B40C8ED18C7835B2979258AAD77EA5347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft Manifest number: 12B7 Signing time: Sun 21 Dec 2025 12:01:08 +0000 Manifest this update: Sun 21 Dec 2025 12:01:08 +0000 Manifest next update: Mon 22 Dec 2025 12:01:08 +0000 Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: RJcBY8hhTBuUTi0DKq8neGAoMHqzH5DdvwSZj2RqqVM=) 2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ed:18:c7:83:5b:29:79:25:8a:ad:77:ea:53:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be Validity Not Before: Dec 21 12:01:08 2025 GMT Not After : Dec 22 12:01:08 2025 GMT Subject: CN=b971de2fc471b0decee82578642c570cee8a9e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:3e:d6:37:a6:f9:1e:7d:51:4f:51:54:e8: e0:0f:8f:9b:d1:36:05:de:ca:b8:bb:7f:78:26:ad: f6:00:d8:95:39:a1:2f:78:1f:e4:6f:4e:8d:af:69: cc:6d:1d:37:12:a6:64:80:01:e9:3d:1c:4a:2a:9a: 1e:fc:49:70:67:a2:58:9e:f2:bc:b8:a8:3c:1f:52: 36:a8:e5:df:3a:8e:16:82:4b:29:83:da:33:7c:0f: 77:9c:da:50:d8:4d:36:00:01:a7:c0:fd:58:d7:d9: 9a:69:da:37:07:ea:2e:a5:72:f0:f9:f5:7f:48:91: 8b:1a:d1:98:3e:9d:55:9c:b1:e1:6c:01:c9:4f:88: 5b:3c:f4:14:94:4a:4d:23:0a:f7:fd:fb:e2:a4:ef: c7:0e:46:d2:fe:08:83:84:1b:6b:3f:6e:c8:30:6d: 37:24:4b:34:07:04:6c:c0:78:be:bd:25:05:66:d7: 0e:c7:3f:80:d1:5b:82:50:82:f3:63:39:8c:5b:d2: f3:a3:3f:aa:ea:67:63:51:92:9d:da:5d:fe:c6:36: db:72:df:6f:b0:22:a4:95:c0:1e:65:94:f1:02:51: ea:6c:ef:d3:7c:5e:76:69:70:fa:ef:8c:a8:41:bb: a2:56:9e:5f:c8:11:ae:79:e6:d5:be:22:bd:71:f2: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:71:DE:2F:C4:71:B0:DE:CE:E8:25:78:64:2C:57:0C:EE:8A:9E:75 X509v3 Authority Key Identifier: keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:82:11:58:57:24:9b:d0:9a:dc:90:ca:27:82:10:1d:51:cb: 49:10:e7:82:34:cc:ba:32:35:1c:c5:06:47:d8:06:ba:0a:88: 37:a9:1e:64:ff:9c:e1:f9:b4:ab:96:ed:46:c9:39:46:c5:1f: 6e:1e:b9:a1:f1:5c:1f:04:2e:44:ed:b4:2f:f2:56:58:d6:7c: 3a:44:93:40:cd:49:76:c3:94:f4:d3:3c:d9:8f:89:e4:7e:0c: 7d:77:fa:51:90:f2:d5:c1:1b:ef:18:4a:b9:83:67:df:fe:29: 8f:4a:f7:b1:c1:62:49:b0:7f:56:7b:c3:a4:ce:e7:c1:2a:6a: c6:4e:27:4b:6e:ff:6f:19:d1:a4:6e:ce:63:e0:23:02:0b:29: 68:92:f5:b0:bf:7d:8a:95:ca:a3:1b:8f:4c:11:62:57:52:f9: 66:93:51:d8:1a:ad:f6:96:4d:be:76:c3:07:ad:cf:c5:a3:3f: 6c:3e:2c:9d:52:6c:6c:d9:6a:b3:d7:1d:56:90:e3:48:3f:04: b5:24:69:c7:83:44:fb:cd:90:ca:fc:ae:19:a5:ea:b7:dd:30: ae:f5:d6:19:b4:de:a4:a7:d8:27:72:73:cd:0c:1f:ac:df:10: 5c:87:3b:c0:11:9e:dc:f9:06:b0:e2:89:7f:99:39:3d:68:ec: ed:b8:3f:0c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAyO0Yx4NbKXkliq136lNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Y2FhNzk3YjkwMGZjMzU1ZmMyNDEyNDY3NzUxZWViMmMx YzY0YmUwHhcNMjUxMjIxMTIwMTA4WhcNMjUxMjIyMTIwMTA4WjAzMTEwLwYDVQQD EyhiOTcxZGUyZmM0NzFiMGRlY2VlODI1Nzg2NDJjNTcwY2VlOGE5ZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvE+1jem+R59UU9RVOjgD4+b0TYF 3sq4u394Jq32ANiVOaEveB/kb06Nr2nMbR03EqZkgAHpPRxKKpoe/ElwZ6JYnvK8 uKg8H1I2qOXfOo4Wgkspg9ozfA93nNpQ2E02AAGnwP1Y19maado3B+oupXLw+fV/ SJGLGtGYPp1VnLHhbAHJT4hbPPQUlEpNIwr3/fvipO/HDkbS/giDhBtrP27IMG03 JEs0BwRswHi+vSUFZtcOxz+A0VuCUILzYzmMW9Lzoz+q6mdjUZKd2l3+xjbbct9v sCKklcAeZZTxAlHqbO/TfF52aXD674yoQbuiVp5fyBGueebVviK9cfIIWwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLlx3i/EcbDezugleGQsVwzuip51MB8GA1UdIwQY MBaAFPjKp5e5APw1X8JBJGd1HussHGS+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1NcW5sN2tBX0RWZndrRWtaM1VlNnl3Y1pMNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMWI1NWNmLWJlOTQtNDlhZC05ZWI4 LTlkYjNkNDRjNmQyZi8xLzEtTXFubDdrQV9EVmZ3a0VrWjNVZTZ5d2NaTDQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ3LzFiNTVjZi1iZTk0LTQ5YWQtOWViOC05ZGIzZDQ0YzZk MmYvMS8xLU1xbmw3a0FfRFZmd2tFa1ozVWU2eXdjWkw0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4IR WFckm9Ca3JDKJ4IQHVHLSRDngjTMujI1HMUGR9gGugqIN6keZP+c4fm0q5btRsk5 RsUfbh65ofFcHwQuRO20L/JWWNZ8OkSTQM1JdsOU9NM82Y+J5H4MfXf6UZDy1cEb 7xhKuYNn3/4pj0r3scFiSbB/VnvDpM7nwSpqxk4nS27/bxnRpG7OY+AjAgspaJL1 sL99ipXKoxuPTBFiV1L5ZpNR2Bqt9pZNvnbDB63PxaM/bD4snVJsbNlqs9cdVpDj SD8EtSRpx4NE+82QyvyuGaXqt90wrvXWGbTepKfYJ3JzzQwfrN8QXIc7wBGe3PkG sOKJf5k5PWjs7bg/DA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:50:58 2025 by rpki-client